Information disclosure

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API UAPI, regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges...

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

This Bug Could Have Let Anyone Crash WhatsApp Of All Group Members

WhatsApp, the world's most popular end-to-end encrypted messaging application, patched an incredibly frustrating software bug that could have allowed a malicious group member to crash the messaging app for all members of the same group, The Hacker News learned. Just by sending a maliciously craft...

The vulnerability of the configuration parameters of McAfee Data Loss Prevention Endpoint for Windows allows a perpetrator to circumvent existing security restrictions and gain access to user sessions.

The vulnerability of the configuration parameters of McAfee Data Loss Prevention Endpoint for Windows-related endpoints is related to incorrect authentication. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and gain access to user sessions...

VMware Carbon Black TAU Threat Research: Visualizing Ransomware with MITRE ATT&CK

If no one had ever heard of ransomware prior to May 2017, then one thing that is fairly certain is that the WannaCry ransomware outbreak unquestionably put ransomware on the security radar, and sent shivers up CISO’s and analysts’ spines for the weeks and months that followed. Only a few weeks...

SQL Injection Vulnerability in Pushcoupon CMS Frontend

Push Couponer CMS is a completely free Taobao coupon website source code program that automatically collects products with coupons and automatically applies for high commission programs. Push Couponer CMS front-end SQL injection vulnerability, attackers can use the vulnerability to obtain sensiti...

The vulnerability of the McAfee Data Loss Prevention Endpoint, a software solution for protecting confidential data, stems from deficiencies in access control. This allows attackers to redirect log files to arbitrary locations.

The vulnerability of the McAfee Data Loss Prevention Endpoint security software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to redirect log files to arbitrary locations...

CVE-2019-3640

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity...

CVE-2019-3640

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity...

CVE-2019-3640 Data Loss Prevention - Unprotected Transport of Credentials

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity...

CVE-2019-3640

CVE-2019-3640 affects McAfee Data Loss Prevention Endpoint’s ePO extension (11.x) prior to 11.4.0. The root cause is the unprotected/unencrypted transmission of credentials during LDAP connectivity testing, enabling remote attackers with network access to capture LDAP login details. Impact is cre...

Unspecified vulnerability in McAfee Data Loss Prevention Endpoint ePO extension

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee, Inc. that prevents theft and accidental disclosure of confidential data and provides security policies for file processing and transmission, shared data flow control and data encryption. The...

McAfee Data Loss Prevention CVE-2019-3640 Information Disclosure Vulnerability

Description McAfee Data Loss Prevention is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information by sniffing the traffic through a man-in-the-middle attack. Successful exploits will lead to other attacks. McAfee Data Loss...

Potential data loss during Export Backup retention processing

Challenge In the environments using scale-out backup repository, Export Backup retention logic may delete the entire repository folder, if the required exported backup file has already been deleted manually prior to its set retention policy expiration. This issue affects Veeam Backup & Replicatio...

Forcepoint Email Security Detection (HTTP)

HTTP based detection of Forcepoint Email Security. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5 Places Where Hackers Are Stealthily Stealing Your Data In 2019

Skyrocketing data breaches bring incalculable losses to organizations and can cost cybersecurity executives their jobs. Here we examine the top five places in 2019 where cybercriminals are stealing corporate and government data without ever getting noticed and then learn how to avoid falling vict...

The vulnerability of the libzmq library, a library for asynchronous messaging, arises from the possibility of operations going beyond the buffer boundaries in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the libzmq library, a library for asynchronous messaging, is related to stack overflow and reallocation issues. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

Directory traversal

IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter c to basic/index.html is not properly sanitised and can therefore be exploited to browse the...

How SMBs Can Mitigate the Growing Risk of File-based Attacks

Cases of document-based malware are steadily rising. 59 percent of all malicious files detected in the first quarter of 2019 were contained in documents. Due to how work is done in today's offices and workplaces, companies are among those commonly affected by file-based attacks. Since small to...

Chrome Bug, Not Avid Software, Causes Damage to MacOS File Systems

Researchers have tracked a problem that caused corruption to the file systems of macOS users to a bug in a Google Chrome update after users originally feared it was a problem with Avid Media Composer. People using the Avid software for video editing on macOS platforms posted warnings Tuesday on...